MicroStudio HTML Injection Vulnerability in Project Comment Section

A vulnerability allowing HTML injection has been identified in MicroStudio version 24.01.29. This issue arises in the comment section of the project page, where remote attackers can inject arbitrary web scripts or HTML. The vulnerability is exploited through the text parameter of the add_project_comment function.

Impact

Exploitation of this vulnerability could lead to HTML injection, allowing for the injection of arbitrary web scripts or HTML. Such an injection could be used to perform phishing attacks or deface the web application.